$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft File: 7qM-huKBrRPcYp8y2NU3YK4dAEc.mft (raw, json) Hash identifier: JhUUbAGD2Fu7ErycC6cOlNrB81nJZ3LJ9RHRk+A1T48= Subject key identifier: 46:72:E9:65:67:3F:9C:36:55:06:AA:57:A3:8F:57:EB:BD:5A:5C:6E Authority key identifier: EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47 Certificate issuer: /CN=A91F30AE/serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047 Certificate serial: 04AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft Manifest number: 04AA Signing time: Thu 03 Jul 2025 00:15:54 +0000 Manifest this update: Thu 03 Jul 2025 00:15:54 +0000 Manifest next update: Thu 10 Jul 2025 00:15:54 +0000 Files and hashes: 1: 7qM-huKBrRPcYp8y2NU3YK4dAEc.crl (hash: mqnbFrVO60OyJwdHrEDLvCfMz9cq0ffM7LZR8XT33Uk=) 2: 84CEFB0E379111EC92DB9A48C4F9AE02.roa (hash: 1ALWg1Qlo5IyGVR2E3WZposvdzb9mETdXX2ZGs91bhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1199 (0x4af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30AE, serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047 Validity Not Before: Jul 3 00:15:54 2025 GMT Not After : Jul 10 00:15:54 2025 GMT Subject: CN=6865cbba-990a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ea:c8:4b:b9:b9:c3:b9:2f:8e:d1:36:9e:5b: f0:3d:19:6f:b8:55:59:7c:39:df:3a:21:6c:3e:73: b2:ff:62:1a:94:26:40:6e:e6:58:5b:7a:7c:f8:6f: 71:0e:eb:c9:1e:02:a9:06:1c:88:82:f7:50:87:14: c2:00:b4:30:37:18:fd:44:7b:06:08:b8:39:de:99: da:c5:6e:20:84:c0:3c:a3:52:8c:e3:3f:9b:ea:6f: ba:94:a8:0c:56:dd:14:63:f5:42:56:69:cc:37:eb: 8d:f4:d1:f3:b0:40:9d:f2:7f:5a:3d:9c:f3:be:b2: 14:b0:15:66:87:c5:36:cd:6f:28:da:39:6d:68:6f: e7:3e:a4:dd:29:3e:43:f6:11:62:c4:03:d0:79:c3: 18:55:e0:ac:e3:f2:0f:a8:e1:4a:f4:2c:d8:fa:9b: d2:65:f2:40:3c:56:db:90:45:a5:4a:18:6c:ae:52: a8:9b:08:0b:30:1b:8b:ea:98:ef:fa:c9:d0:07:b0: d0:c3:b7:da:ed:15:4d:86:f5:41:06:b3:a8:a1:22: f3:54:96:7d:a9:4d:37:c3:f2:ce:5e:d6:3d:bc:de: 8a:2e:e9:d1:3c:d1:1e:98:75:3b:34:f0:cd:88:7a: 31:d1:f7:93:72:e6:d7:b1:4c:d6:a8:07:b0:0a:1f: 36:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:72:E9:65:67:3F:9C:36:55:06:AA:57:A3:8F:57:EB:BD:5A:5C:6E X509v3 Authority Key Identifier: keyid:EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3e:dc:23:d5:92:b1:34:ba:fe:d0:d5:ec:d0:a0:5a:c0:9a: 1d:ea:72:c9:e9:b2:30:fc:79:24:ca:51:c1:30:3f:7a:a1:2f: ab:de:55:0a:e8:8f:1b:b6:d6:a6:90:44:65:51:6f:2c:5c:7c: e3:81:b8:12:22:f5:ac:cc:5f:45:64:8e:66:68:03:93:77:bf: d5:27:59:8e:80:3c:e1:4a:fc:88:db:4b:6e:78:5f:29:44:06: 7b:60:dc:ed:26:11:c0:9c:65:7c:1e:d6:6e:38:74:f0:91:2a: ee:11:97:bf:0b:ed:fd:a2:0b:cc:46:56:58:68:ed:21:40:a6: 9b:9b:07:2f:e1:48:e1:8f:27:d9:f6:ae:c3:5b:4b:f2:45:0c: b5:33:71:f3:b8:67:1b:62:ea:68:15:32:0a:8b:9d:df:d1:c7: 42:41:6c:14:46:a6:d9:6e:51:b7:49:05:0f:13:2c:96:98:63: 72:c4:b7:d9:61:db:8d:70:96:0d:4d:a1:dc:44:9c:93:00:ae: 4e:b2:b8:32:ff:1b:9b:9f:9d:52:fb:cc:52:da:5d:60:77:54: 7b:38:cd:0d:cd:d9:51:5b:db:9d:ce:65:ae:fe:84:b3:1f:0b: c5:bc:64:e7:4c:40:ba:c5:5d:c2:20:20:d1:f7:cc:83:e7:06: 03:15:d1:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwQUUxMTAvBgNVBAUTKEVFQTMzRTg2RTI4MUFEMTNEQzYyOUYzMkQ4RDUzNzYw QUUxRDAwNDcwHhcNMjUwNzAzMDAxNTU0WhcNMjUwNzEwMDAxNTU0WjAYMRYwFAYD VQQDEw02ODY1Y2JiYS05OTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OrIS7m5w7kvjtE2nlvwPRlvuFVZfDnfOiFsPnOy/2IalCZAbuZYW3p8+G9x DuvJHgKpBhyIgvdQhxTCALQwNxj9RHsGCLg53pnaxW4ghMA8o1KM4z+b6m+6lKgM Vt0UY/VCVmnMN+uN9NHzsECd8n9aPZzzvrIUsBVmh8U2zW8o2jltaG/nPqTdKT5D 9hFixAPQecMYVeCs4/IPqOFK9CzY+pvSZfJAPFbbkEWlShhsrlKomwgLMBuL6pjv +snQB7DQw7fa7RVNhvVBBrOooSLzVJZ9qU03w/LOXtY9vN6KLunRPNEemHU7NPDN iHox0feTcubXsUzWqAewCh82bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZy6WVn P5w2VQaqV6OPV+u9WlxuMB8GA1UdIwQYMBaAFO6jPobiga0T3GKfMtjVN2CuHQBH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBBRS9FN0ZDMEQxNDM3 OEUxMUVDODQzQ0QyNDVDNEY5QUUwMi83cU0taHVLQnJSUGNZcDh5Mk5VM1lLNGRB RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdxTS1odUtCclJQY1lwOHkyTlUzWUs0ZEFFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzBBRS9FN0ZDMEQxNDM3OEUxMUVDODQzQ0QyNDVDNEY5QUUwMi83cU0taHVLQnJS UGNZcDh5Mk5VM1lLNGRBRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbPtwj1ZKxNLr+0NXs0KBawJod6nLJ6bIw/HkkylHBMD96oS+r3lUK 6I8bttamkERlUW8sXHzjgbgSIvWszF9FZI5maAOTd7/VJ1mOgDzhSvyI20tueF8p RAZ7YNztJhHAnGV8HtZuOHTwkSruEZe/C+39ogvMRlZYaO0hQKabmwcv4UjhjyfZ 9q7DW0vyRQy1M3HzuGcbYupoFTIKi53f0cdCQWwURqbZblG3SQUPEyyWmGNyxLfZ YduNcJYNTaHcRJyTAK5Osrgy/xubn51S+8xS2l1gd1R7OM0NzdlRW9udzmWu/oSz HwvFvGTnTEC6xV3CICDR98yD5wYDFdH+ -----END CERTIFICATE-----Generated at Thu Jul 3 07:04:29 2025 by rpki-client